Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138312e302f32342d3234203d3e203338373638.roa
File:                     3230322e38372e3138312e302f32342d3234203d3e203338373638.roa (raw, json)
Hash identifier:          zMn/HTL/8Mz8tKV2Iz3DZFDrUhzeHv9uR5zpz1uYkq0=
Subject key identifier:   E7:68:C0:2C:1C:66:EE:94:E7:63:E1:13:8B:C2:E3:D1:D8:1F:9A:E2
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       133482EB47EBD98FD7A1E0CC4AF9721F0375060D
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138312e302f32342d3234203d3e203338373638.roa
Signing time:             Sat 06 Apr 2024 04:02:03 +0000
ROA not before:           Sat 06 Apr 2024 03:57:03 +0000
ROA not after:            Sat 05 Apr 2025 04:02:03 +0000
asID:                     38768
IP address blocks:        202.87.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 14:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:82:eb:47:eb:d9:8f:d7:a1:e0:cc:4a:f9:72:1f:03:75:06:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr  6 03:57:03 2024 GMT
            Not After : Apr  5 04:02:03 2025 GMT
        Subject: CN=E768C02C1C66EE94E763E1138BC2E3D1D81F9AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:6e:6d:58:4d:96:14:1e:53:59:c1:23:62:
                    77:bc:9c:9c:b4:ed:58:0a:cb:c0:f5:36:47:b5:79:
                    f1:10:09:f9:0c:9c:84:1b:e9:88:05:e4:3b:93:0d:
                    f0:6a:9e:fe:a9:e0:e8:b3:04:95:ae:e1:9f:d4:e5:
                    fc:49:a2:36:1a:64:bf:2a:70:fb:47:aa:57:95:78:
                    36:7f:64:bf:f9:14:80:e6:0e:2a:8b:25:d3:ec:e9:
                    18:bb:d0:c7:3e:26:ac:50:68:09:31:22:a7:d8:ca:
                    5b:19:f2:a6:e8:c0:a8:1e:b1:81:01:79:9f:87:e6:
                    b2:72:d3:a0:c8:0c:2a:d6:de:d1:a7:e9:49:fd:25:
                    5a:52:40:f4:aa:f9:36:e1:f4:aa:bd:26:10:35:ab:
                    3c:97:30:d3:53:a6:00:b2:47:d1:1f:85:ba:d1:bc:
                    c1:89:ef:77:d2:1b:b5:de:67:c6:a9:21:26:01:30:
                    09:96:be:53:7e:07:54:c4:e8:28:fa:38:fa:eb:1e:
                    cb:9d:fb:7c:99:de:d1:c7:7c:d6:13:05:c5:08:5a:
                    cf:86:77:59:2e:4e:93:26:52:da:71:40:34:50:53:
                    eb:14:ed:18:fd:5c:05:94:e0:78:7b:d2:a8:85:28:
                    98:03:cf:51:80:27:29:ce:8e:1a:50:b8:f5:18:88:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:68:C0:2C:1C:66:EE:94:E7:63:E1:13:8B:C2:E3:D1:D8:1F:9A:E2
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138312e302f32342d3234203d3e203338373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:0c:59:1a:d8:96:9c:43:c7:b0:dc:46:bc:79:d3:1a:77:
         31:38:ac:ff:f3:cb:61:c0:01:0a:34:a2:ef:f6:78:c9:d7:96:
         f2:31:0f:c4:fb:ae:42:a5:a8:ed:db:a0:f4:db:ce:5f:bb:47:
         8c:58:8d:3c:2e:50:1e:d0:b4:3e:ef:02:33:99:c7:78:92:05:
         89:05:64:8c:aa:1d:12:a1:d7:7a:26:00:aa:1e:35:9e:13:a7:
         b2:e2:cf:b6:9e:1e:4d:0b:6d:70:72:35:16:ef:ea:f7:2f:25:
         e6:c3:98:d3:a9:0d:cf:9e:24:26:08:6e:41:95:be:dc:8c:98:
         fd:4e:ff:93:2e:9f:36:62:5b:2e:4d:8d:30:bb:7e:3e:03:17:
         81:8b:b8:66:3e:a9:05:5d:42:52:f9:40:14:58:f5:90:5d:3e:
         78:52:b0:b0:04:ab:33:58:23:01:ca:36:03:b2:72:30:81:20:
         43:d6:38:1f:9c:ef:cb:b5:fa:3d:77:0e:7b:25:48:1e:89:71:
         3a:1c:59:23:14:91:80:14:fc:51:9c:c5:cf:79:88:b3:64:14:
         59:12:45:b6:f4:af:f9:4d:e5:59:76:4e:ec:77:2d:0e:01:69:
         fd:6a:1e:e9:e0:33:2b:09:8f:0f:8c:d1:f4:12:76:64:05:42:
         ad:eb:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:39:53 2024 by rpki-client on console-ams.rpki-client.org